HCL Software HCL Bigfix Mobile / Modern Client Management vulnerabilities

4 vulnerabilities

Known vulnerabilities in HCL Software HCL Bigfix Mobile / Modern Client Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2021-27783hcl softwarehcl bigfix mobile / modern client management+2
EPSS score
0.38%
User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed.6.6CVE-2021-27781hcl softwarehcl bigfix mobile / modern client management+2
EPSS score
0.45%
The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.5.3CVE-2021-27780hcl softwarehcl bigfix mobile / modern client management+2
EPSS score
0.77%
The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.6.6CVE-2023-28025hcl softwarehcl bigfix mobile / modern client management+1
EPSS score
0.31%
Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert pop-up displaying a cookie. To mitigate stored XSS vulnerabilities, a preventive measure involves thoroughly sanitizing and validating all user inputs before they are processed and stored in the server storage.